From owner-freebsd-hackers Sat Jul 31 10:37:31 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from mail.du.gtn.com (mail.du.gtn.com [194.77.9.57]) by hub.freebsd.org (Postfix) with ESMTP id 7A7CC14CF0; Sat, 31 Jul 1999 10:37:27 -0700 (PDT) (envelope-from ticso@cicely8.cicely.de) Received: from cicely7.cicely.de (cicely.de [194.231.9.142]) by mail.du.gtn.com (8.8.6/8.8.6) with ESMTP id TAA25469; Sat, 31 Jul 1999 19:33:57 +0200 (MET DST) Received: from cicely8.cicely.de (cicely8.cicely.de [10.1.2.10]) by cicely7.cicely.de (8.9.0/8.9.0) with ESMTP id TAA44493; Sat, 31 Jul 1999 19:33:19 +0200 (CEST) Received: (from ticso@localhost) by cicely8.cicely.de (8.9.3/8.9.2) id TAA18512; Sat, 31 Jul 1999 19:34:11 +0200 (CEST) (envelope-from ticso) Date: Sat, 31 Jul 1999 19:34:10 +0200 From: Bernd Walter To: Ben Rosengart Cc: Bernd Walter , Warner Losh , "Brian F. Feldman" , "Jordan K. Hubbard" , hackers@FreeBSD.ORG Subject: Re: So, back on the topic of enabling bpf in GENERIC... Message-ID: <19990731193410.C18402@cicely8.cicely.de> References: <19990731190814.A18402@cicely8.cicely.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.3i In-Reply-To: ; from Ben Rosengart on Sat, Jul 31, 1999 at 01:17:44PM -0400 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, Jul 31, 1999 at 01:17:44PM -0400, Ben Rosengart wrote: > On Sat, 31 Jul 1999, Bernd Walter wrote: > > > That would mean you can't run a secured DHCP server :( > > I think only the client needs BPF. Anyway, you just start the server in > the rc files, before securelevel is raised. AFAIK it needs - but rarpd was already mentioned and there are lots of other tools which needs bpf and may reopen bpf. The securelevel is a realy nice feature and I use it often. My problem with it is that I asume the more features are put in the more often users may see that they can't raise it one step higher because of other needs. Maybe a set of sysctls with a switch to off only behavour would be a better way. -- B.Walter COSMO-Project http://www.cosmo-project.de ticso@cicely.de Usergroup info@cosmo-project.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message